McAfee: Crypto-Mining Malware Grew By Over 4,000 Percent in 2018

Instances of crypto-mining malware increased by a whopping 4,467 percent this year, according to research from McAfee.

AccessTimeIconDec 20, 2018 at 10:00 a.m. UTC
Updated Sep 13, 2021 at 8:41 a.m. UTC
Consensus 2023 Logo
Join the most important conversation in crypto and Web3 taking place in Austin, Texas, April 26-28.
Consensus 2023 Logo
Join the most important conversation in crypto and Web3 taking place in Austin, Texas, April 26-28.

Instances of crypto-mining malware increased by well over 4,000 percent this year, according to research from McAfee.

In its December 2018 report, the U.S.-based cybersecurity firm said that there were nearly four million new mining malware threats in the third quarter of 2018 alone, compared to less than 500,000 in 2017 and 2016.

A separate release giving specific numbers showed that the number of malicious crypto-miners grew nearly 55 percent in Q3 of 2018, with total malware growing 4,467 percent in the last four quarters.

CoinDesk - Unknown

Graph via McAfee

“Many ransomware actors [are] switching to a more lucrative business model: cryptomining,” the report states.

In a growing trend, cybercriminals have begun focusing on leveraging internet of things (IoT) devices for crypto mining, McAfee said. New malware targeting these devices saw a 72 percent increase and total IoT-targeting malware grew by 203 percent in the last four quarters.

Remco Verhoef, security researcher at McAfee, said:

“We would not usually think of using routers or IoT devices such as IP cameras or videorecorders as cryptominers because their CPUs are not as powerful as those in desktop and laptop computers. However, due to the lack of proper security controls, cybercriminals can benefit from volume over CPU speed. If they can control thousands of devices that mine for a long time, they can still make money.”

Verhoef also said that McAfee discovered a Mac OS threat named OSX.Dummy, which is being distributed on cryptomining chat groups. The malware, posted online, suggests that users download software to fix "crypto problems," after which it injects its malicious code. This way, users essentially infected their own devices, he explained.

Back in July, over a million computers in China were hacked to mine more than $2 million-worth of cryptocurrencies over two years. Another survey by software company Citrix showed that almost 60 percent U.K. businesses had been hit by cryptocurrency mining malware in August.

Malware image via Shutterstock 

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.


Learn more about Consensus 2023, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.